Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9734908CE011EEB101246E4AD9E6FC.roa
File: 8C9734908CE011EEB101246E4AD9E6FC.roa (raw, json)
Hash identifier: 8wE5a/jaGGFX+tCIUr9Bf3E1BRzXIz4outRfr9aMb+Q=
Subject key identifier: 8A:12:7A:A0:95:98:98:AF:76:CF:DA:1B:06:87:37:ED:D0:58:9F:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5539
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9734908CE011EEB101246E4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:50:55 +0000
ROA not before: Mon 27 Nov 2023 04:50:52 +0000
ROA not after: Tue 26 Dec 2023 04:50:52 +0000
asID: 62240
IP address blocks: 154.194.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21817 (0x5539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:50:52 2023 GMT
Not After : Dec 26 04:50:52 2023 GMT
Subject: CN=6564202f-3e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:e5:7e:72:ff:29:cb:52:6b:d5:9e:d5:fb:
dd:25:83:cf:81:28:5b:db:2e:ae:af:cf:ad:47:ec:
7a:61:3b:88:e0:c3:96:e1:11:22:2a:02:30:d2:a8:
85:35:ad:50:53:a9:48:6c:6f:7a:1d:19:05:ae:aa:
5c:cd:c7:cf:77:81:6a:62:5d:dd:5d:f7:2b:2b:49:
8a:94:de:e2:25:4d:cd:2c:cd:ad:17:da:ce:9d:77:
a2:e8:38:f8:61:27:5a:e7:75:f8:2f:f6:c3:e6:ab:
96:82:41:d8:1c:0e:b2:b8:69:08:73:b7:62:9c:11:
99:9b:2b:c1:83:38:a5:ea:f6:0a:8a:2b:b4:c9:bd:
98:61:6f:25:93:54:59:80:cb:24:0b:d4:1c:a2:2c:
7e:23:45:0e:92:30:1a:f5:f9:c6:57:b9:d8:18:ad:
b3:c5:85:ac:dd:3b:25:fc:21:85:1e:32:a2:c0:dd:
44:a6:cf:4f:06:6f:f8:eb:48:90:92:96:3c:a5:ec:
11:24:80:88:44:90:28:38:6c:f7:7b:92:a9:ea:87:
96:b6:62:47:7c:3e:6a:0d:07:9f:fc:91:2e:e5:f2:
80:32:ac:2a:ea:21:c4:ef:2e:ba:6c:c2:aa:1c:e2:
6f:87:8d:68:93:9b:b4:58:70:00:37:97:22:96:54:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:7A:A0:95:98:98:AF:76:CF:DA:1B:06:87:37:ED:D0:58:9F:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9734908CE011EEB101246E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.101.0/24
Signature Algorithm: sha256WithRSAEncryption
af:55:4e:7a:e3:26:16:35:ca:c7:19:d7:2b:58:a4:bc:71:f4:
07:f6:ef:0d:54:81:ae:0e:db:67:f3:5b:fd:51:5f:80:20:7d:
2d:84:62:e5:14:66:8d:a8:ab:1d:08:05:d3:b9:44:92:01:66:
f2:30:aa:50:2e:53:f9:a3:0b:2c:eb:11:6e:6f:c0:a1:1f:14:
0a:be:ca:9a:d6:d9:4c:3a:0f:ef:9e:3f:e5:21:9c:9f:b5:d2:
b6:66:b9:89:d1:e0:f4:bb:d0:8e:9b:73:89:22:93:60:fa:4b:
32:55:d6:c8:0f:96:e1:a5:b4:36:0b:92:32:4e:bc:3a:2b:f7:
6d:78:2d:c2:22:e9:c8:88:f4:09:76:ce:cb:2d:e5:9b:38:74:
ab:e2:52:e8:fd:45:67:27:98:d9:18:6b:09:6c:25:fc:77:e5:
47:a1:a0:f9:f6:64:5e:4c:fe:cc:71:8c:c2:4d:55:b4:19:fa:
da:53:8c:cb:e1:91:42:b4:8f:98:97:5a:9f:e6:5a:fd:8f:d9:
db:ac:e6:cf:29:61:1a:08:08:5e:06:59:b8:61:b6:f9:af:84:
dd:37:e0:a0:d5:8f:34:4d:cb:97:79:f9:a3:d4:d3:33:f3:8f:
98:57:ae:e8:7d:c5:9b:d6:4b:5c:e3:6e:52:ef:26:16:e5:45:
af:53:3b:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVTkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDUwNTJaFw0yMzEyMjYwNDUwNTJaMBgxFjAU
BgNVBAMTDTY1NjQyMDJmLTNlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLCOV+cv8py1Jr1Z7V+90lg8+BKFvbLq6vz61H7HphO4jgw5bhESIqAjDS
qIU1rVBTqUhsb3odGQWuqlzNx893gWpiXd1d9ysrSYqU3uIlTc0sza0X2s6dd6Lo
OPhhJ1rndfgv9sPmq5aCQdgcDrK4aQhzt2KcEZmbK8GDOKXq9gqKK7TJvZhhbyWT
VFmAyyQL1ByiLH4jRQ6SMBr1+cZXudgYrbPFhazdOyX8IYUeMqLA3USmz08Gb/jr
SJCSljyl7BEkgIhEkCg4bPd7kqnqh5a2Ykd8PmoNB5/8kS7l8oAyrCrqIcTvLrps
wqoc4m+HjWiTm7RYcAA3lyKWVAiZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUihJ6
oJWYmK92z9obBoc37dBYn2cwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhDOTczNDkwOENFMDExRUVCMTAxMjQ2RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawmUwDQYJKoZIhvcNAQEL
BQADggEBAK9VTnrjJhY1yscZ1ytYpLxx9Af27w1Uga4O22fzW/1RX4AgfS2EYuUU
Zo2oqx0IBdO5RJIBZvIwqlAuU/mjCyzrEW5vwKEfFAq+yprW2Uw6D++eP+UhnJ+1
0rZmuYnR4PS70I6bc4kik2D6SzJV1sgPluGltDYLkjJOvDor9214LcIi6ciI9Al2
zsst5Zs4dKviUuj9RWcnmNkYawlsJfx35UehoPn2ZF5M/sxxjMJNVbQZ+tpTjMvh
kUK0j5iXWp/mWv2P2dus5s8pYRoICF4GWbhhtvmvhN034KDVjzRNy5d5+aPU0zPz
j5hXruh9xZvWS1zjblLvJhblRa9TOys=
-----END CERTIFICATE-----
Generated at Fri May 9 10:54:58 2025 by rpki-client